Citrix Virtual Apps and Desktops

FIDO2 authentication

September 16, 2022

Contributed by:

Local authorization and virtual authentication using FIDO2

Support for FIDO2 enables users to take advantage of the local endpoint FIDO2 components in a virtual machine. Users can now authenticate in their virtual session using FIDO2 security keys or integrated biometrics on devices that have TPM 2.0 and Windows Hello.

For more information about FIDO2, see FIDO2: WebAuthn & CTAP.

For information about using this feature, see FIDO2 redirection.

Requirements

Citrix requirements

Citrix Virtual Apps and Desktops 2009 or later
Citrix Workspace app 2009.1 for Windows or later

Microsoft requirements

Windows 10 Version 1809 (client) or later
Windows 2019 (Server OS)
Windows Hello (optional)

FIDO2 requirements

Windows Hello
- TPM 2.0
- Integrated biometrics
  - Facial recognition
  - Fingerprint scanner
- WebAuthn
FIDO2-enabled Security Key

UWP support for authenticating using FIDO2

With the release of Citrix Virtual Apps and Desktops 2112, Citrix supports FIDO2 on applications that use a Microsoft UWP application to provide authentication.

Applications such as Microsoft Teams, Microsoft Outlook for Office 365 and OneDrive use a UWP application for authentication as a link to Azure Active Directory. Citrix now supports using FIDO2 to authenticate those applications.

UWP requirements

Citrix Virtual Apps and Desktops 2112 or later
Citrix Workspace app 2009.1 for Windows or later

For more information on Microsoft and FIDO2 requirements, see Requirements.

The official version of this content is in English. Some of the Cloud Software Group documentation content is machine translated for your convenience only. Cloud Software Group has no control over machine-translated content, which may contain errors, inaccuracies or unsuitable language. No warranty of any kind, either expressed or implied, is made as to the accuracy, reliability, suitability, or correctness of any translations made from the English original into any other language, or that your Cloud Software Group product or service conforms to any machine translated content, and any warranty provided under the applicable end user license agreement or terms of service, or any other agreement with Cloud Software Group, that the product or service conforms with any documentation shall not apply to the extent that such documentation has been machine translated. Cloud Software Group will not be held responsible for any damage or issues that may arise from using machine-translated content.

FIDO2 authentication

September 16, 2022

Contributed by:

September 16, 2022

Contributed by:

FIDO2 authentication

Local authorization and virtual authentication using FIDO2

Requirements

Citrix requirements

Microsoft requirements

FIDO2 requirements

UWP support for authenticating using FIDO2

UWP requirements

In this article